Qrpay 44 Malaysia Member Privacy & Personal Data Protection Policy

This Privacy Policy applies to all personal information collected, processed, and stored by qrpay 44 in the context of our gaming and digital entertainment platform operations serving Malaysian users.

"Personal Information" in the context of this policy means any information that can be used to identify an individual, directly or indirectly — including but not limited to name, phone number, email address, identification number, financial information and platform usage data.

qrpay 44 acts as a "Data Processor" under the terminology of Malaysia's PDPA 2010, and we bear full responsibility for all data under our control.

qrpay 44 collects various types of information depending on how you interact with our platform. Below is a summary of the data collected:

We does not collect sensitive information such as biometric data, medical records, religious beliefs or political views unless specifically required to meet a particular legal obligation.

qrpay 44 uses your personal data for the following legitimate and transparent purposes:

• Account Management: Creating, verifying, and maintaining your member account.
• Transaction Processing: Processing deposits and withdrawals in MYR (RM) via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay.
• Security & Fraud Prevention: Detecting and preventing suspicious activity, fraud, and money laundering.
• Customer Support: Providing assistance and resolving issues reported by members.
• Platform Improvements: Analyses usage patterns to improve the user experience.
• Legal Compliance: Meeting reporting and compliance requirements with the relevant authorities.
• Service Communications: Sending important notifications related to your account, security, and transactions.
• Marketing (with consent): Sending promotional information, bonuses and special offers — only where you have given your consent.

Under Malaysia's PDPA 2010, qrpay 44 processes your personal data on the following lawful legal bases:

• Contract Performance: Processing required to perform the agreement between you and qrpay 44 (e.g. processing deposits, withdrawals and gameplay).
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement purposes.
• Legal Compliance: Processing required to comply with Malaysian legal obligations.
• Consent: Processing for marketing or promotional communication purposes, for which you have given explicit consent.

qrpay 44 does not sell or rent your personal data to any party. We only share data under the following limited circumstances:

• Payment Service Providers: Transaction information required to process deposits and withdrawals via DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay.
• Game Providers: Minimum technical data required to display and run games from providers such as Evolution Gaming and Pragmatic Play.
• Authority: When required by Malaysian law or a valid court order.
• Auditors & Professional Advisors: Under strict confidentiality obligations for audit, accounting or legal advisory purposes.

All third parties with whom we share data are required to uphold data protection standards equivalent to or higher than our own.

qrpay 44 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction:

• 256-bit SSL/TLS encryption for all data in transit.
• AES-256 encryption for data stored in databases (data at rest).
• Role-based access control (RBAC) — only staff who need access to specific data are permitted to view it.
• Automated access auditing — all access to member data is logged and monitored.
• Regular penetration testing and security assessments.
• Mandatory data security training for all qrpay 44 staff.

Data Retention Period: Active account data is retained for as long as your account remains active. Following account closure, data is retained for 5 years to meet legal and audit requirements, after which it will be securely deleted or anonymised.

qrpay 44 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:

You can manage or disable optional cookies through your web browser settings. Disabling certain cookies may affect the functionality of some platform features.

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by qrpay 44:

Platform qrpay 44 is unsuitable and not permitted for individuals under the age of 21. We do not knowingly collect, process, or store personal data of underage individuals.

If you believe that a child or underage individual has registered an account on our platform, please contact us immediately at support@qrpay44.im. We will investigate and close the account, and delete all associated data within 48 hours.

A small amount of technical data may be processed outside Malaysia in connection with cloud infrastructure used by our technical service providers. In all such cases, qrpay 44 ensuring that:

• Data transfers only take place to countries or entities that provide an adequate level of data protection.
• Legally binding Data Processing Agreements are signed with all relevant providers.
• Approved standard contractual clauses are used to ensure ongoing data protection.

Financial data and primary identification details of Malaysian members are stored on servers operating to international security standards.

qrpay 44 only sends marketing communications — including bonus information, promotions, and special offers — to members who have given explicit consent during registration or via their account settings.

You may withdraw your marketing consent at any time through the following methods:

• Click the "Unsubscribe" link at the bottom of any of our promotional emails.
• Update your notification settings in your account under the "Communication Preferences" section.
• Contact our support team via live chat or email at support@qrpay44.im.

qrpay 44 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. You will be notified of any significant updates via:

• In-platform notification upon your next login.
• Email sent to all registered members prior to the effective date.
• Update the "Last Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically. Continued use of the platform following notification of any changes constitutes acceptance of the updated Privacy Policy.

For any enquiries, concerns, or requests relating to this Privacy Policy or the handling of your personal data by qrpay 44, please reach out to us through the following channels: